diff --git a/app/Policies/UserPolicy.php b/app/Policies/UserPolicy.php index bd952a3..6d580b4 100644 --- a/app/Policies/UserPolicy.php +++ b/app/Policies/UserPolicy.php @@ -11,7 +11,7 @@ class UserPolicy public function edit(User $user, User $editableUser) { - return $editableUser->manager_id == $user->id; + return $editableUser->id == $user->id || $editableUser->manager_id == $user->id; } public function delete(User $user, User $editableUser) diff --git a/tests/Unit/Policies/UserPolicyTest.php b/tests/Unit/Policies/UserPolicyTest.php index 17f2a26..d9b0e1c 100644 --- a/tests/Unit/Policies/UserPolicyTest.php +++ b/tests/Unit/Policies/UserPolicyTest.php @@ -20,6 +20,14 @@ class UserPolicyTest extends TestCase } /** @test */ + public function user_can_edit_their_own_profile() + { + $user = factory(User::class)->create(); + + $this->assertTrue($user->can('edit', $user)); + } + + /** @test */ public function manager_can_delete_a_user() { $manager = factory(User::class)->create();